CVE-2025-13780

pgAdmin versions up to 9.10 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical risk to the integrity and security of the database management system and underlying data.

CVSS v3 9.1 CRITICAL

9.1^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.1 / Impact : 5.3

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact LOW

Scope CHANGED

References

Link	Resource
https://github.com/pgadmin-org/pgadmin4/issues/9368	Issue Tracking

Configurations

Configuration 1 (hide)

cpe:2.3:a:pgadmin:pgadmin_4:*:*:*:*:*:postgresql:*:*

History

07 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Las versiones de pgAdmin hasta la 9.10 están afectadas por una vulnerabilidad de ejecución remota de código (RCE) que ocurre al ejecutarse en modo servidor y al realizar restauraciones desde archivos de volcado en formato PLAIN. Este problema permite a los atacantes inyectar y ejecutar comandos arbitrarios en el servidor que aloja pgAdmin, lo que representa un riesgo crítico para la integridad y seguridad del sistema de gestión de base de datos y los datos subyacentes.

Information

Published : 2025-12-11 19:15

Updated : 2026-10-07 20:10

NVD link : CVE-2025-13780

Mitre link : CVE-2025-13780

CVE.ORG link : CVE-2025-13780

JSON object : View

Products Affected

pgadmin

pgadmin_4

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

{"id": "CVE-2025-13780", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-13780", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-12T04:55:53.536076Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.3, "exploitabilityScore": 3.1}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007", "affectedData": [{"repo": "https://github.com/pgadmin-org/pgadmin4", "vendor": "pgadmin.org", "modules": ["Restore"], "product": "pgAdmin 4", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "9.10"}], "programFiles": ["https://github.com/pgadmin-org/pgadmin4/blob/master/web/pgadmin/tools/restore/__init__.py"], "defaultStatus": "unaffected"}]}], "published": "2025-12-11T19:15:52.857", "references": [{"url": "https://github.com/pgadmin-org/pgadmin4/issues/9368", "tags": ["Issue Tracking"], "source": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "pgAdmin versions up to 9.10 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical risk to the integrity and security of the database management system and underlying data."}, {"lang": "es", "value": "Las versiones de pgAdmin hasta la 9.10 est\u00e1n afectadas por una vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo (RCE) que ocurre al ejecutarse en modo servidor y al realizar restauraciones desde archivos de volcado en formato PLAIN. Este problema permite a los atacantes inyectar y ejecutar comandos arbitrarios en el servidor que aloja pgAdmin, lo que representa un riesgo cr\u00edtico para la integridad y seguridad del sistema de gesti\u00f3n de base de datos y los datos subyacentes."}], "lastModified": "2026-10-07T20:10:01.970", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:pgadmin:pgadmin_4:*:*:*:*:*:postgresql:*:*", "vulnerable": true, "matchCriteriaId": "31BFDAD3-B87D-46DD-9984-3000087309DD", "versionEndIncluding": "9.10"}], "operator": "OR"}]}], "sourceIdentifier": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007"}